File tree Expand file tree Collapse file tree 4 files changed +1
-9
lines changed Expand file tree Collapse file tree 4 files changed +1
-9
lines changed Original file line number Diff line number Diff line change @@ -22,10 +22,8 @@ hldr_begin:
22
22
;API CRC table, null terminated
23
23
;-----------------------------------------------------------------------------
24
24
25
- dd 0E9258E7Ah ;FlushInstructionCache
26
25
dd 0C97C1FFFh ;GetProcAddress
27
26
dd 03FC1BD8Dh ;LoadLibraryA
28
- dd 009CE0D4Ah ;VirtualAlloc
29
27
db 0
30
28
31
29
;-----------------------------------------------------------------------------
Original file line number Diff line number Diff line change @@ -24,10 +24,8 @@ struc mapstk
24
24
endstruc
25
25
26
26
struc krncrcstk
27
- .kVirtualAlloc: resd 1
28
27
.kLoadLibraryA: resd 1
29
28
.kGetProcAddress: resd 1
30
- .kFlushInstructionCache: resd 1
31
29
endstruc
32
30
33
31
struc _IMAGE_FILE_HEADER
Original file line number Diff line number Diff line change @@ -29,10 +29,9 @@ regstksize equ 30h
29
29
lodsq
30
30
mov rbp , qword [ rax + mDllBase ]
31
31
call parse_exports
32
- dd 0E9258E7Ah ;FlushInstructionCache
32
+
33
33
dd 0C97C1FFFh ;GetProcAddress
34
34
dd 03FC1BD8Dh ;LoadLibraryA
35
- dd 009CE0D4Ah ;VirtualAlloc
36
35
db 0
37
36
38
37
;-----------------------------------------------------------------------------
@@ -203,7 +202,6 @@ reloc_finished:
203
202
;-----------------------------------------------------------------------------
204
203
;call entrypoint
205
204
;-----------------------------------------------------------------------------
206
-
207
205
mov eax , dword [ rbp + _IMAGE_NT_HEADERS.nthOptionalHeader + _IMAGE_OPTIONAL_HEADER.ohAddressOfEntryPoint ]
208
206
add rax , qword [ rbx ]
209
207
call rax
Original file line number Diff line number Diff line change @@ -26,10 +26,8 @@ struc mapstk
26
26
endstruc
27
27
28
28
struc krncrcstk
29
- .kVirtualAlloc: resq 1
30
29
.kLoadLibraryA: resq 1
31
30
.kGetProcAddress: resq 1
32
- .kFlushInstructionCache: resq 1
33
31
endstruc
34
32
35
33
struc _IMAGE_FILE_HEADER
You can’t perform that action at this time.
0 commit comments